At the end of June, UnityPoint agreed to pay class members $2.8 million for a data breach. UnityPoint Health, which is also known as Iowa Health System, reached this settlement after there were two data breaches at its health system in 2017 and 2018. These two breaches comprised data on more than one million patients and employees.
In April 2018, UnityPoint Health reported that hackers breached more than 16,000 people’s information through an email phishing attack. UnityPoint had discovered the data breach in February 2018, but plaintiffs alleged that the hackers’ access to employee email accounts occurred as early as November 2017.